If a third party were to discover your verification filename, that party could—unbeknownst to you—change the URLs registered with your crawl data. For additional security, you can also restrict the IP addresses that are allowed to register crawl data.
Connections from all IP addresses are allowed by default; to only allow connections from your own network, register the appropriate IP addresses.